PT-2012-4179 · Red Hat · Cumin +1

Name of the Vulnerable Software and Affected Versions: Cumin versions prior to 0.1.5444 Red Hat Enterprise Messaging, Realtime, and Grid MRG version 2.0 Description: The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to error message displays ...

Cross site scripting

Cross-site scripting XSS vulnerability in fup in Frams' Fast File EXchange FEX, aka fex before 20120215 allows remote attackers to inject arbitrary web script or HTML via the id parameter...

PT-2012-2167

Name of the Vulnerable Software and Affected Versions Social Book Facebook Clone 2010 Description The issue allows remote attackers to inject arbitrary web script or HTML via the PATH INFO parameter to several API endpoints, including "/signup.php", "/lostpass.php", "/login.php", "/index.php",...

PT-2012-2120

Name of the Vulnerable Software and Affected Versions Open Business Management OBM versions 2.4.0-rc13 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML via specific parameters in various PHP files. The vulnerable parameters include tf delegation, tf...

CVE-2011-5125

Cross-site scripting XSS vulnerability in Blue Coat Director before 5.5.2.3 allows remote attackers to inject arbitrary web script or HTML via vectors involving the HTTP TRACE method...

CVE-2011-5115

Cross-site scripting XSS vulnerability in DLGuard, possibly 4.6 and earlier, allows remote attackers to inject arbitrary web script or HTML via the searchCart parameter to index.php...

CVE-2012-2769

Multiple cross-site scripting XSS vulnerabilities in the topic administration page in the Extension::MobileUI extension before 1.02 for Best Practical Solutions RT 3.8.x and in Best Practical Solutions RT before 4.0.6 allow remote attackers to inject arbitrary web script or HTML via unspecified...

CVE-2012-2571

Multiple cross-site scripting XSS vulnerabilities in WinWebMail Server 3.8.1.6 allow remote attackers to inject arbitrary web script or HTML via an e-mail message body with 1 a SCRIPT element, 2 a crafted Cascading Style Sheets CSS expression property, 3 a CSS expression property in the STYLE...

CVE-2012-3413: Undefined Security Weakness

The HTMLQuoteColorer::process function in messageviewer/htmlquotecolorer.cpp in KDE PIM 4.6 through 4.8 does not disable JavaScript, Java, and Plugins, which allows remote attackers to inject arbitrary web script or HTML via a crafted email...

PT-2012-5013

Name of the Vulnerable Software and Affected Versions Kajona versions prior to 3.4.2 Description The issue allows remote attackers to inject arbitrary web script or HTML via various parameters to different modules and pages. The vulnerable parameters include absender name, absender email, absende...

UBUNTU-CVE-2012-3790

Cross-site scripting XSS vulnerability in index.php in Adiscon LogAnalyzer before 3.4.4 and 3.5.x before 3.5.5 allows remote attackers to inject arbitrary web script or HTML via the highlight parameter in a Search action...

PT-2012-3613 · Microsoft · Internet Explorer

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer versions 6 through 9 Description: The issue allows remote attackers to inject arbitrary web script or HTML via crafted character sequences with EUC-JP encoding. This could result in information disclosure when a us...

DEBIAN-CVE-2011-2083

Multiple cross-site scripting XSS vulnerabilities in Best Practical Solutions RT 3.x before 3.8.12 and 4.x before 4.0.6 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2012-4377

Name of the Vulnerable Software and Affected Versions Pligg CMS versions prior to 1.2.2 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the user or page parameter to "admin/admin comments.php" or "admin/admin links.php", or the list...

PT-2012-3712

Name of the Vulnerable Software and Affected Versions Schneider Electric Kerweb versions prior to 3.0.1 Schneider Electric Kerwin versions prior to 6.0.1 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the evtvariablename parameter in...

cumin: multiple XSS flaws

Multiple cross-site scripting XSS vulnerabilities in Cumin before r5238 allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 widgets or 2 pages...

cumin: multiple XSS flaws

Multiple cross-site scripting XSS vulnerabilities in Cumin before r5238 allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 widgets or 2 pages...

CVE-2011-5082

Cross-site scripting XSS vulnerability in the s2Member Pro plugin before 111220 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s2memberproauthnetcheckoutcoupon parameter aka Coupon Code field...

CVE-2012-1099

Cross-site scripting XSS vulnerability in actionpack/lib/actionview/helpers/formoptionshelper.rb in the select helper in Ruby on Rails 3.0.x before 3.0.12, 3.1.x before 3.1.4, and 3.2.x before 3.2.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving certain...

PT-2012-3000

Name of the Vulnerable Software and Affected Versions ZENphoto version 1.4.2 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the msg parameter in an external action to "zp-core/admin.php", PATH INFO to "zp-core/admin.php", or the albu...